npm wechat-claude-skill @1.1.20

score

0.5311 med

flagged 2026-06-29 05:56

signals by category

content 1 topology 2 enrichment 1

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

typosquat + new_install_script: typosquat shape with active payload or stub-rush surface (+0.15)

Signals fired

signal	weight	rationale
content
new_install_script	1.0	first time ['postinstall'] present
topology
no_repo	0.3	package.json has no repository field
typosquat	1.0	combosquat of 'skill'
enrichment
depsdev_no_source_repo	0.5	deps.dev has no SOURCE_REPO link for this version

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "a327969974"
  ],
  "versions": 4
}

Evidence (package doc at flag time)

{
  "dependencies_count": 3,
  "dist": {
    "integrity": "sha512-78ojxAKSwYK6RbbPBGSD1WjKTzBYy7estRMt8Q47koOGy/mU1kuu5G4edrf3Y4nOe3YO18epPjNyMwm+ptDyBQ==",
    "tarball": "https://registry.npmjs.org/wechat-claude-skill/-/wechat-claude-skill-1.1.20.tgz",
    "unpackedSize": 191160
  },
  "dist-tags": {
    "latest": "1.1.20"
  },
  "latest_version": "1.1.20",
  "maintainers": [
    {
      "email": "740620163@qq.com",
      "name": "a327969974"
    }
  ],
  "num_versions": 22,
  "repository": null,
  "scripts": {
    "build": "tsc && node scripts/postbuild.js",
    "dev": "tsx src/bridge.ts",
    "postinstall": "node dist/setup.js install"
  },
  "signal_details": {
    "_amplifiers": [
      "typosquat + new_install_script: typosquat shape with active payload or stub-rush surface (+0.15)"
    ],
    "depsdev_no_source_repo": "deps.dev has no SOURCE_REPO link for this version",
    "new_install_script": "first time ['postinstall'] present",
    "no_repo": "package.json has no repository field",
    "typosquat": "combosquat of 'skill'"
  },
  "time": {
    "created": "2026-06-19T13:55:31.068Z",
    "modified": "2026-06-25T21:47:11.895Z"
  }
}